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MICROPROCESSOR CIRCUIT FOR PORTABLE DATA CARRIERS AND METHOD 

FOR OPERATING THE CIRCUIT 

Cross-Reference to Related Application : 

This is a continuation of copending International application 
PCT/DE02/00093, filed January 15, 2002, which designated the 
United States, and which was not filed in English. 

Background of the Invention : 
Field of the Invention : 
The invention relates to a microprocessor circuit for portable 
data carriers having at least one control unit, at least one 
memory for free programming with at least one program having 
functions, a stack for buffer-storing data, and a register 
bank having at least one register. 

Microprocessor circuits of the afore -mentioned type are, 
preferably, used in so-called smart cards, i.e., identity 
cards, credit cards, charge cards, and the like, which are 
equipped with an integrated circuit. However, the 
microprocessor circuits can also be used in so-called payment 
transaction modules that communicate with the above-mentioned 
cards through corresponding interfaces. 
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One of the important advantages of such a card lies in the 
diverse uses that are possible for the cardholder. The 
microprocessor contained in the integrated circuit and the 
associated storage allow extensive data processing in the card 
5 itself, whereas cards provided with a magnetic strip, for 
example, make it necessary for all the data processing 
operations to be carried out externally. 

The card manufacturer can equip the microprocessor with a 
10 resident operating system that performs basic functions, for 

example, procedures for comparing a code input externally with 
a stored code and the like. The memories associated with the 
microprocessor serve not only for storing the operating system 
but also for storing particular applications, which may 
15 include a plurality of functions, and parameters that are 

necessary, e.g., for security checking, and must at all events 
be kept secret . 

Diverse application of the cards is achieved when an operating 
20 system with associated programs forms a starting point, 

certain interfaces are defined and a memory or memory area is 
reserved for an external program. The card manufacturer, 
then, provides for the user, i.e., for the organization that 
issues cards, a memory or memory area for programming in its 
25 external program. In this external program, the organization 
can, then, define specific operations that are independent of 
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the operating system and relate only to the specific 
organization. 

The microprocessor circuits of the afore-mentioned type are 
provided with at least one register bank that is available to 
the function currently being executed, the so-called context. 
In the event of a function call of a second function from a 
first function, the registers occupied by data of the first 
function must be stored on a buffer store, a stack. In the 
second function, these registers are, then, available to the 
second function for writing. Upon the return from the second 
function to the first function, the data buffer-stored on the 
stack must be written to the register again. 

Storing the registers on the stack or reading the registers 
from the stack by corresponding write/read operations for the 
individual registers requires a comparatively large number of 
instructions, which leads to a significant enlargement of the 
program code. Furthermore, there is the problem that, in the 
event of a function change or function call, the data 
associated with the first function in the register can still 
be read by the second function. This can constitute a 
security problem, for example, in the case of credit cards. 
This is because the second function could read, if 
appropriate, still secret data in the registers that should, 
intrinsically, be known only to the first function. 
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The use of so-called "register windows", a register window 
being available to a function, is also known. If a second 
function is called, then a further register window is selected 
by way of the change in a "register pointer" . The further 
register window is, then, available to the second function for 
writing. The register bank can have a plurality of register 
windows. As soon as the last unwritten register window is 
called by a function and written to, the registers of one or 
more register windows can be buffer- stored simultaneously on a 
stack. It is, thus, possible to simultaneously write to a 
register for the current function at that time and also to 
store the register contents of a previously active function. 
A particularly time-saving variant is, thus, involved. What 
is disadvantageous, however, is that all the registers of a 
register window are written to the stack regardless of whether 
or not the registers have a datum. 

Summary of the Invention : 

It is accordingly an object of the invention to provide a 
microprocessor circuit for portable data carriers and method 
for operating the circuit that overcome the hereinafore- 
mentioned disadvantages of the heretofore-known devices and 
methods of this general type and that ensure, using simple 
measures, that the register contents of one function are not 
accessible to another function. 
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By virtue of the fact that the registers having a datum do not 
have to be determined by a compiler, the registers can be 
stored quickly, in an energy-efficient manner and with little 
program code, namely, a single instruction. 

In a first embodiment, the auxiliary register has a number of 
further registers corresponding to the number of registers of 
the register bank, each of these further registers being 
provided for the storage of a single bit. The auxiliary 
register, thus, likewise represents a register bank. 

In accordance with a second embodiment, the auxiliary register 
has exactly one further register, the further register being 
provided for the storage of a bit sequence that corresponds to 
the number of registers of the register bank. The auxiliary 
register is, preferably, a register of the register bank. 
Consequently, in this second embodiment, it is not necessary 
to modify a microprocessor circuit known per se because the 
auxiliary register is stored in a register of the register 
bank. The bottom-most or top-most register is, preferably, 
used for this. 

In accordance with another feature of the invention, in a 
preferred refinement of the microprocessor circuit, a further- 
stack that cannot be managed by the programmer is provided for 
the storage of the data contained in the register bank. This 
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It is also conceivable, of course, for the registers of the 
second area also to be assigned to the auxiliary register so 
that, in the event of a function call and function change, all 
5 the registers of the register bank, i.e., those of the first 
and second areas, would be stored on the stack. 

In accordance with an additional feature of the invention, the 
first area of the register bank can be divided into a 

10 plurality of sub-areas that are, respectively, available to 

one of the functions. This division into a plurality of sub- 
areas corresponds to the register windows mentioned in the 
introduction. Provided that the first area of the register 
bank has a sufficiently high number of registers, this variant 

is opens up an extremely energy-efficient, fast procedure, which 
is a major advantage, particularly, in the case of 
microprocessor circuits in portable data carriers. 

With the objects of the invention in view, there is also 
20 provided a method for operating a microprocessor circuit, 

including the steps of providing a circuit with at least one 
control unit, at least one memory for free programming with at 
least one program having functions, a stack for buffer- storing 
data, a register bank having registers, and an auxiliary 
25 register, setting all of the bits of the auxiliary register to 
a logical "0" when the circuit is initialized, storing bits in 
the auxiliary register, each of the bits being associated with 
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one of the registers and indicating whether or not a 
respective one of the registers contains a value different 
from a logical "0" , and setting a bit of the auxiliary 
register associated with a respective one of the registers to 
a value different from the logical "0" when a datum is written 
to the associated register of the register bank. 

In the case of the method according to the invention for 
operating the microprocessor circuit described above, when the 
microprocessor circuit is initialized, all the bits of the 
auxiliary register are set to a first value. When a datum is 
written to a register of the register bank, the associated bit 
of the auxiliary register is set to a second value. The 
initialization of the microprocessor circuit takes places upon 
activation to ensure that all the registers and all the bits 
of the auxiliary register are in a defined, known state. When 
a datum is written, the respective bit is set automatically to 
the second value in order, thereby, to indicate that the 
auxiliary register has a value. The first value of the bit of 
the auxiliary register may be 0, for example, while the second 
value of the bits of the auxiliary register may be 1 . It goes 
without saying that an opposite assignment is also possible. 

In accordance with yet another mode of the invention, reading 
of a datum from one of the registers of the register bank is 
only possible if the associated bit of the auxiliary register 
has the second value. This means that only when the assigned 
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bit of the register has the second value, e.g., 1, is the 
datum that is actually stored in the register read out. By- 
contrast, if the associated bit in the auxiliary register had 
the first value, then a datum possibly held in the register 
would not be returned to the microprocessor, but, instead, a 
defined value, e.g., 0. 

In accordance with yet a further mode of the invention, when a 
datum from one of the registers of the register bank whose 
associated bit of the auxiliary register has the logical u 0" 
value is read, the datum "0" is returned. 

This reveals that, to erase a register, the register, itself, 
need not be erased, rather it suffices to set the associated 
bit in the auxiliary register to the first value. This is 
enough to ensure that the actual datum in the auxiliary 
register can no longer be read out. A plurality of registers 
can, thus, be erased in a simple, fast, and current -saving 
manner. 

In accordance with yet an added mode of the invention, in the 
event of a change from a first function to a second function, 
the data associated with the first function in registers of 
the register bank and the bit sequence of the auxiliary 
register are stored successively in the stack or the further 
stack. In other words, this means that not all the registers 
of the register bank are stored on the stack, but, rather, 
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only those registers that have a bit with the second value in 
the auxiliary register. In addition to the data of the 
registers, the bit sequence of the auxiliary register is, 
likewise, stored on the stack to be able to restore the data 
in the correct registers in the event of a return. 

In accordance with yet an additional mode of the invention, 
the circuit is provided with a second stack for storing at 
least some data in the register bank and making the second 
stack inaccessible by a programmer, and, if the circuit 
changes from a first function to a second function, the data 
associated with the first function in the registers of the 
register bank and the bit sequence of the auxiliary register 
is successively stored in one of the stack and the second 
stack. 

In accordance with a concomitant mode of the invention, it is 
furthermore advantageous if, after the storage of the data and 
the bit sequence of the auxiliary register in the stack or in 
the further stack, the bits of the auxiliary register are set 
to the first value (logical "0" ) . This corresponds to the 
erasure of the register as explained above. Consequently, the 
registers themselves have not actually been erased, but, 
rather, only the bits of the associated auxiliary register. 

Other features that are considered as characteristic for the 
invention are set forth in the appended claims. 



-12- 



P2001, 0025 



Although the invention is illustrated and described herein as 
embodied in a microprocessor circuit for portable data 
carriers and a method for operating the circuit, it is, 
nevertheless, not intended to be limited to the details shown 
because various modifications and structural changes may be 
made therein without departing from the spirit of the 
invention and within the scope and range of equivalents of the 
claims . 

The construction and method of operation of the invention, 
however, together with additional objects and advantages 
thereof, will be best understood from the following 
description of specific embodiments when read in connection 
with the accompanying drawings. 

Brief Description of the Drawings : 

FIG. 1 is a block circuit diagram of a microprocessor circuit 
according to the invention; 

FIG. 2 is a diagrammatic illustration of a first exemplary 
embodiment of a register and an associated auxiliary register 
according to the invention; 

FIG. 3A is a diagrammatic illustration of a second exemplary 
embodiment of a register and an associated auxiliary register 
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according to the invention in which the auxiliary register is 
part of the register; 

FIG. 3B is a diagrammatic illustration of the third exemplary 
5 embodiment of the register and the associated auxiliary 

register according to the invention in which the auxiliary 
register is part of the register; 

FIG. 4 is a diagrammatic illustration of a first exemplary 
10 embodiment showing the principle of the storage of the 
registers on the stack according to the invention; 

FIG. 5 is a diagrammatic illustration of a second exemplary 
embodiment showing the principle of the storage of the 
15 registers on the stack according to the invention; 

FIGS. 6A and 6B are diagrammatic illustrations of two 
embodiments of a register and associated auxiliary registers 
thereof according to the invention, the register being 
20 subdivided into a first area and into a second area; and 

FIG. 7 is a fragmentary, diagrammatic illustration of a 
further exemplary embodiment of registers according to the 
invention in which the register is realized as a register 
2 5 window. 
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Description of the Preferred Embodiments : 

Referring now to the figures of the drawings in detail and 
first, particularly to FIG. 1 thereof, there is shown a 
diagrammatic construction of the microprocessor circuit 
according to the invention. Because the construction of such 
microprocessor circuits is known, in principle, it will not be 
explained in detail here. The illustration is, therefore, 
also restricted to the components that are necessary for the 
invention. 

The microprocessor circuit contains a control unit 1, which is 
connected to a memory 4 through a control line 30, a register 
bank 2, an auxiliary register 6, and a hardware -internal stack 
8, which is designated below as a further stack. The memory 4 
can be divided into different areas. By way of example, the 
memory may include a random access memory (RAM) , a read-only 
memory (ROM), and EE PROM . Parts of these memory areas are 
associated with the operating system, which contains, in part, 
security-relevant data that must be kept secret. Furthermore, 
the memory 4 includes a stack 5, which represents a buffer 
store that can be accessed quickly. The latter can be 
utilized by all the programs held in the memory 4. This means 
that the stack 5 is publicly accessible to every function of 
the programs . 

In the present example, the register bank 2 has eight 
registers 3, and exactly one datum can be stored in each 
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register 3. Each register 3 is assigned a further register 7 
of the auxiliary register 6. Exactly one bit is stored in 
each of the further registers 7, the bit containing an item of 
information regarding whether or not a datum is stored in the 
associated register 3. 

The further stack 8, in which the data stored in the registers 
3 are, preferably, stored in the event of a function change, 
is a so-called hardware -internal stack. This means that the 
latter is not accessible to programs stored in the memory 4 . 
Consequently, a programmer cannot access this memory area. 
Rather, the management is the responsibility of the operating 
system. Although the further stack 8 is shown set apart from 
the memory 4 in FIG. 1, the further stack 8 may, of course, be 
part of the memory 4 . 

The illustration of the register 2 and of the auxiliary 
register 6 in FIG. 1 was chosen merely to be able to explain 
the assignment of the registers 3 and of the further registers 
7. As will become apparent from the further description, the 
auxiliary register 6 need not necessarily be a register that 
is different from the register bank 2. 

In this and the following embodiments, it is assumed by way of 
example that, in the case of a logic value u l" in the further 
register 7, a valid datum was written in the associated 
register 3 of the register bank 2. 
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FIGS. 2 and 3 show two possible embodiments of the association 
of the register bank 2 and of the auxiliary register 6. 

In FIG. 2, the register bank 2 and the auxiliary register 6 
are mutually separate register banks. The number of 
respective registers 3, 7 is identical. While an arbitrary 
number of bits can be stored in a register 3 of the register 
bank 2, depending on the embodiment, a further register 7 of 
the auxiliary register 6 is only able to store one bit in each 
case . 

If the registers are consecutively numbered from 0 to 7 from 
bottom to top as in the present exemplary embodiments, then it 
can be seen from FIG. 2 that the registers 2, 3, and 4 have a 
valid datum. The respectively corresponding further registers 
7, therefore, contain a logic w l" . By contrast, a datum was 
not written to the remaining registers, so that the associated 
bit has a logic value "0" . 

In FIGS. 3A and 3B, a hardware change is not necessary because 
the auxiliary register according to the invention is stored in 
a register 3 of the register bank 2. The consequence of this 
is that, given a total of 8 registers, only 7 are available 
for writing for the function currently being executed. In 
FIG. 3A, the auxiliary register 6' is stored in the register 
7. In FIG. 3B, the auxiliary register 6'' is stored in the 
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present in the associated register 3. Only when the 
associated bit of the interrogated register 3 contains the 
second value (logic "1") is the datum present in the register 
read out. It is evident from this that, to initialize or 
erase a register, only the bits of the auxiliary register must 
be set to the first value (logic "0"). This is enough to 
ensure that no datum held in a register 3 can be read out. 

As already described, upon the call of a second function from 
a first function, it is necessary to buffer-store the data 
held in the registers 3 on a stack. FIGS. 4 to 7 below show 
different embodiments of the way in which this can be 
realized. 

FIG. 4 shows the configuration, disclosed in FIG. 2, of the 
register bank 2 and of the associated, separate auxiliary 
register 6. Upon the call of the second function, e.g., by 
the instruction CALL (function 2) , those registers 3 of the 
register bank whose associated bits have the second value 
(logic "1") are, preferably, stored on the further stack 8. 
Provided that, as shown in FIG. 4, a register without data is 
situated between two registers 3 having data, such a register 
is skipped when writing to the stack 8. The consequence of 
this is that only those registers that include data are 
successively stored on the stack 8. In addition to the 
register contents, the bit sequence of the auxiliary register 
6 is stored in a word row of the further stack 8. In such a 
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case, the bit sequence of the auxiliary register 6 is, 
preferably, stored as the last value. By these measures, in 
the event of a return from the function 2 to the first 
function, the register contents can be written back from the 
5 stack 8 to the register bank 2, the respective contents being 
stored precisely in the register in which they were previously 
written. 

FIG. 5 differs from FIG. 4 merely by the fact that the 
10 auxiliary register 6' is located in a register of the register 
bank 2. The register 7 is used in the present exemplary 
embodiment. The procedure otherwise corresponds to the 
procedure described with respect to FIG. 4. 

15 It is often customary to divide a register bank 2 into a first 
area 10 and into a second area 20. In this case, those data 
that are required both by the calling function (first 
function) and by the called function (second function) are 
written in the second area 20. These are the transfer 

20 parameters. The first area 10 is used only by the called 
function, in order to buffer-store data there. 

It suffices to buffer-store only the registers of the first 
area 10 on the further stack 6. For this reason, as shown in 
25 FIG. 6A, only the first area 10 is associated with an 
auxiliary register 6. 
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As an alternative, as shown by FIG. 6B, it is also possible 
for an auxiliary register 6 to be associated with both the 
first and to the second area 10, 20 of the register bank 2. 
In such a case, the transfer parameters are also buffer-stored 
5 on the stack upon the call of a function. 

FIG. 7 shows the division of the register bank 2 into a 
plurality of register windows 11, 12. Although FIG. 7 only 
shows two register windows 11, 12, the register bank can have 
10 an arbitrary number of register windows. The register windows 
are all located in the first area 10, provided that the 
register bank is divided into a first and second area. 

Exactly one register window is available for a function 
15 currently being executed. The register window is selected by 
a stack pointer REG SP. The registers allocated to a register 
window can, then, be written to by the function. The 
auxiliary register 6, 6' is stored in the respective top-most 
register of a register window. 

20 

The use of register windows is advantageous, in particular, 
when frequent function changes are performed. This procedure 
means that it is not necessary to store the written-to 
registers in a stack in the event of every function change. 

25 

In the present example, suppose that the register window 11 is 
already occupied or written to by a first function. The first 
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function calls a second function, as a result, the stack 
pointer points to the next register window 12 (REG SP) . As a 
result of the function call, in contrast to the previous 
exemplary embodiments, the register list is not stored on the 
stack, rather the stack pointer is merely shifted. The second 
function can, thus, utilize the register window 12 (registers 
16 to 23) , the auxiliary register being stored in the register 
23. Upon the call of a third function, a third non- 
illustrated register window could be utilized. In the 
meantime, the register window written to first can, 
simultaneously, be written to a stack. This would be the 
register window 11 in the present exemplary embodiment. The 
individual registers are stored in the manner described in 
FIGS. 4 and 5, respectively. 

Such a procedure enables extremely fast, energy-efficient, and 
reliable storage of the register contents stored in a register 
bank. 

The exemplary embodiment shown in FIG. 7 in this case has 
register windows having an identical number of registers. 
This is not absolutely necessary. The size of the register 
window can be adapted to the registers required by the 
respective function. In such a case, however, one of the 
registers of a register window would, in principle, be used 
for storing the bit sequence of the auxiliary register. 
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